This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft File: FE5652AD4702104DB082C396B05EE5D04542E7D7.mft (raw, json) Hash identifier: UupCoELcAA59n6vV3Gbau3pbVBkEfLRTr8oOrTFZRSg= Subject key identifier: 12:B5:33:50:74:5A:64:1C:8D:12:43:F3:AE:4E:A5:11:E3:99:64:5B Authority key identifier: FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 Certificate issuer: /CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Certificate serial: 6BAA81EF0E59C3324B46D1D32D394CB25AFD3AF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft Manifest number: 0199 Signing time: Fri 23 Jan 2026 19:12:03 +0000 Manifest this update: Fri 23 Jan 2026 19:07:03 +0000 Manifest next update: Tue 27 Jan 2026 02:47:03 +0000 Files and hashes: 1: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: 03BXaxAzi9VaO+DQQ6QWjZsMJ2gPh3wF9aEYxb1vAPc=) 2: FE5652AD4702104DB082C396B05EE5D04542E7D7.crl (hash: QnvyWEyQc8RL23HElf0ooJQgP97LnpanmzBMlb58Glk=) 3: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: 20qa29YtuQDpydBxT+l3i2qfQTa2+tFQJ7mFZgoSVhk=) 4: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: J6vL2iPNUwb9fYjqqj1vv1gpk3+iSC5RPrrqhYMFLI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 02:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:aa:81:ef:0e:59:c3:32:4b:46:d1:d3:2d:39:4c:b2:5a:fd:3a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Validity Not Before: Jan 23 19:07:03 2026 GMT Not After : Jan 27 02:47:03 2026 GMT Subject: CN=12B53350745A641C8D1243F3AE4EA511E399645B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:5a:62:d1:14:c6:a8:4e:cb:90:97:15:f1: ec:c6:69:02:5f:6d:54:12:88:b6:68:96:1a:82:aa: 2e:ea:61:33:f8:02:90:b0:8f:62:f3:05:25:ec:be: b4:33:1c:e6:bc:43:92:66:fe:b9:92:83:d8:73:55: c2:28:52:92:a0:64:81:d4:3b:7c:7d:3e:d6:86:19: ff:2c:70:43:f8:0b:da:84:e8:8a:10:6d:cb:c3:ae: 36:05:2c:09:c6:3e:b5:26:4d:83:47:24:26:1b:1a: 36:ac:bf:77:c3:8a:7a:9e:01:1b:cb:88:00:19:7d: 69:da:95:f7:62:89:cb:8a:b3:66:45:82:70:de:7a: fa:4e:b4:a8:dd:14:b3:0f:57:7c:15:5f:ef:07:a6: 09:cb:40:98:14:10:c9:f2:25:0a:fb:44:7a:c3:1f: 66:22:db:6d:a9:97:42:66:57:02:42:0d:fa:94:e5: 80:96:4f:8e:bf:ee:de:22:43:20:c7:6c:bf:29:d2: a8:16:fa:83:ea:52:79:23:13:65:ab:e7:04:fb:6b: e3:b4:32:fc:1f:a9:bb:08:a0:93:f3:1b:6c:f4:8f: f9:c3:23:02:19:42:61:a1:60:f2:3d:ed:9d:54:cc: 2a:4f:d8:6d:79:67:0a:49:72:2f:bc:8f:c6:a1:d2: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B5:33:50:74:5A:64:1C:8D:12:43:F3:AE:4E:A5:11:E3:99:64:5B X509v3 Authority Key Identifier: keyid:FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c4:e3:b6:60:2c:b7:7d:43:f8:ac:bb:d7:80:2b:ab:5f:bb: da:55:8a:61:1d:3d:eb:e1:f8:9b:e3:0d:ae:33:4a:2e:3f:81: aa:41:0b:5b:2d:80:92:00:3b:1b:3f:59:5f:62:56:36:c7:76: 08:c0:45:31:71:1d:10:38:53:92:0a:5c:8c:d6:80:9c:49:ed: 11:13:fb:03:a7:f6:44:ba:cd:44:bd:de:3b:d6:78:ee:14:5a: 61:fb:ba:ac:fa:07:c0:e6:c9:ff:91:3d:73:0a:a8:33:d9:9a: 39:11:da:b9:66:7e:7b:97:80:a8:03:95:93:16:e8:51:fb:72: bf:73:5e:84:d3:fe:b8:c8:96:66:cb:23:f4:eb:3e:0b:21:8c: 10:78:22:c7:30:7e:6a:ed:d5:78:7e:3f:2b:40:08:b9:51:32: ee:95:a8:7d:14:57:7b:6e:1b:1b:64:f0:1d:90:6b:b8:b8:84: 11:cd:32:3d:19:63:a7:c8:e2:33:c2:7c:f2:6b:38:d5:61:84: 16:d4:cf:a0:79:46:7c:41:d9:ec:77:74:a8:49:d9:7f:ce:95: ff:c9:1b:2b:13:de:3f:33:90:80:58:36:b0:4d:24:5d:53:47: 76:5a:84:9e:7d:bc:78:f1:ec:3d:e4:fb:c2:db:49:59:cd:31: 32:e3:64:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6qB7w5ZwzJLRtHTLTlMslr9OvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0 NTQyRTdENzAeFw0yNjAxMjMxOTA3MDNaFw0yNjAxMjcwMjQ3MDNaMDMxMTAvBgNV BAMTKDEyQjUzMzUwNzQ1QTY0MUM4RDEyNDNGM0FFNEVBNTExRTM5OTY0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBa1pi0RTGqE7LkJcV8ezGaQJf bVQSiLZolhqCqi7qYTP4ApCwj2LzBSXsvrQzHOa8Q5Jm/rmSg9hzVcIoUpKgZIHU O3x9PtaGGf8scEP4C9qE6IoQbcvDrjYFLAnGPrUmTYNHJCYbGjasv3fDinqeARvL iAAZfWnalfdiicuKs2ZFgnDeevpOtKjdFLMPV3wVX+8HpgnLQJgUEMnyJQr7RHrD H2Yi222pl0JmVwJCDfqU5YCWT46/7t4iQyDHbL8p0qgW+oPqUnkjE2Wr5wT7a+O0 MvwfqbsIoJPzG2z0j/nDIwIZQmGhYPI97Z1UzCpP2G15ZwpJci+8j8ah0uA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUErUzUHRaZByNEkPzrk6lEeOZZFswHwYDVR0j BBgwFoAU/lZSrUcCEE2wgsOWsF7l0EVC59cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2FmZDU3YS1lNmRlLTRhNWYtYjVjNi0xMDg2NWQ1YThjOTgvMC9GRTU2NTJBRDQ3 MDIxMDREQjA4MkMzOTZCMDVFRTVEMDQ1NDJFN0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0NTQy RTdENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1 YzYtMTA4NjVkNWE4Yzk4LzAvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1 RDA0NTQyRTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHE47ZgLLd9Q/isu9eAK6tfu9pVimEdPevh +JvjDa4zSi4/gapBC1stgJIAOxs/WV9iVjbHdgjARTFxHRA4U5IKXIzWgJxJ7RET +wOn9kS6zUS93jvWeO4UWmH7uqz6B8Dmyf+RPXMKqDPZmjkR2rlmfnuXgKgDlZMW 6FH7cr9zXoTT/rjIlmbLI/TrPgshjBB4Iscwfmrt1Xh+PytACLlRMu6VqH0UV3tu Gxtk8B2Qa7i4hBHNMj0ZY6fI4jPCfPJrONVhhBbUz6B5RnxB2ex3dKhJ2X/Olf/J GysT3j8zkIBYNrBNJF1TR3ZahJ59vHjx7D3k+8LbSVnNMTLjZJU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:08 2026 by rpki-client